PR Build #12933
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PR Build | |
| on: | |
| pull_request: {} | |
| workflow_dispatch: {} | |
| merge_group: | |
| types: | |
| - checks_requested | |
| permissions: | |
| contents: read | |
| jobs: | |
| cache-deps: | |
| name: cache-deps (linux) | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| - name: Setup dep cache | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Pull go deps | |
| run: go mod download | |
| lint: | |
| name: lint (linux) | |
| runs-on: ubuntu-22.04 | |
| needs: cache-deps | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Setup build tool cache | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: .build | |
| key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
| - name: Lint | |
| run: make lint | |
| - name: Tidy check | |
| run: make tidy-check | |
| - name: Generate check | |
| run: make generate-check | |
| - name: Shell check | |
| run: shellcheck .github/workflows/scripts/*.sh | |
| unit-test: | |
| strategy: | |
| matrix: | |
| OS: [ubuntu-22.04, macos-latest] | |
| runs-on: ${{ matrix.OS }} | |
| needs: cache-deps | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Run unit tests | |
| run: ./.github/workflows/scripts/run_unit_tests.sh | |
| unit-test-race-detector: | |
| name: unit-test (linux with race detection) | |
| runs-on: ubuntu-22.04 | |
| needs: cache-deps | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Run unit tests | |
| run: ./.github/workflows/scripts/run_unit_tests_under_race_detector.sh | |
| artifacts: | |
| name: artifacts (linux) | |
| runs-on: ubuntu-22.04 | |
| needs: [cache-deps, images] | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| - name: Install regctl | |
| uses: regclient/actions/regctl-installer@7c7e6f032ce752dc58585af38e242635f4e7cd8e # main | |
| - name: Download archived images | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| name: images | |
| path: . | |
| - name: Expand archived images | |
| run: | | |
| tar xvf images.tar.gz | |
| - name: Build artifacts | |
| run: ./.github/workflows/scripts/build_artifacts.sh ${{ runner.os }} | |
| - name: Archive artifacts | |
| uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4 | |
| with: | |
| name: binaries-linux | |
| path: ./artifacts/ | |
| images: | |
| name: images (linux) | |
| runs-on: ubuntu-22.04 | |
| needs: [cache-deps] | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Load cached build tools | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: .build | |
| key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0 | |
| - name: Build images | |
| run: make images-no-load | |
| - name: Export images | |
| run: tar -czvf images.tar.gz *-image.tar | |
| - name: Archive images | |
| uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4 | |
| with: | |
| name: images | |
| path: images.tar.gz | |
| images-windows: | |
| name: images (windows) | |
| runs-on: windows-2022 | |
| needs: artifacts-windows | |
| timeout-minutes: 45 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Load cached executables | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ./bin/ | |
| key: ${{ runner.os }}-executables-${{ github.sha }} | |
| - name: Wait for Docker to be ready | |
| run: pwsh ./.github/workflows/scripts/wait-for-docker-windows.ps1 | |
| - name: Build images | |
| run: make images-windows | |
| - name: Export images | |
| run: | | |
| docker save spire-server-windows:latest-local spire-agent-windows:latest-local oidc-discovery-provider-windows:latest-local -o images-windows.tar | |
| gzip images-windows.tar | |
| - name: Archive images | |
| uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4 | |
| with: | |
| name: images-windows | |
| path: images-windows.tar.gz | |
| build-matrix: | |
| name: Build matrix | |
| runs-on: ubuntu-22.04 | |
| needs: [cache-deps] | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - id: set-matrix | |
| name: Collect versions | |
| run: | | |
| json_array=$(bash ./.github/workflows/scripts/find_k8s.sh) | |
| echo "test=$json_array" >> $GITHUB_OUTPUT | |
| echo "Collected tests: $json_array" | |
| outputs: | |
| test: ${{ steps.set-matrix.outputs.test }} | |
| integration: | |
| name: integration (${{ matrix.arch }}) (${{ strategy.job-index}}/${{ strategy.job-total }}) | |
| runs-on: ${{ matrix.runs-on }} | |
| needs: [cache-deps, images] | |
| timeout-minutes: 45 | |
| permissions: | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| arch: [x64, arm64] | |
| num_runners: [10] | |
| runner_id: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10] | |
| include: | |
| - arch: x64 | |
| runs-on: ubuntu-22.04 | |
| - arch: arm64 | |
| runs-on: ubuntu-22.04-arm | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| # The "upgrade" integration test needs the history to ensure | |
| # that the version number in the source code has been bumped as | |
| # expected. This action does not fetch tags unless we supply a | |
| # fetch depth of zero. | |
| fetch-depth: 0 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| - name: Install regctl | |
| uses: regclient/actions/regctl-installer@7c7e6f032ce752dc58585af38e242635f4e7cd8e # main | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Load cached build tools | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: .build | |
| key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
| - name: Download archived images | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| name: images | |
| path: . | |
| - name: Load archived images | |
| run: | | |
| tar xvf images.tar.gz | |
| make load-images | |
| - name: Run integration tests | |
| env: | |
| NUM_RUNNERS: ${{ matrix.num_runners }} | |
| THIS_RUNNER: ${{ matrix.runner_id }} | |
| TERM: dumb | |
| CICD_TARGET_BRANCH: ${{ github.event.pull_request.base.ref }} | |
| IGNORE_SUITES: ${{ matrix.arch == 'arm64' && 'suites/upstream-authority-ejbca' || '' }} # Waiting for EJBCA to support arm64 (https://github.com/spiffe/spire/issues/6060) | |
| run: ./.github/workflows/scripts/split.sh | xargs ./test/integration/test.sh | |
| integration-k8s: | |
| name: integration-k8s-${{ matrix.test[0] }}-${{ matrix.arch }} | |
| runs-on: ${{ matrix.runs-on }} | |
| needs: [cache-deps, images, build-matrix] | |
| timeout-minutes: 45 | |
| permissions: | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| arch: [x64, arm64] | |
| include: | |
| - arch: x64 | |
| runs-on: ubuntu-22.04 | |
| num_runners: 1 | |
| runner_id: 1 | |
| - arch: arm64 | |
| runs-on: ubuntu-22.04-arm | |
| num_runners: 1 | |
| runner_id: 1 | |
| #Test elements should be added as [KubeCTLVersion, K8s-image, KindVersion] | |
| test: ${{ fromJson(needs.build-matrix.outputs.test) }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| # The "upgrade" integration test needs the history to ensure | |
| # that the version number in the source code has been bumped as | |
| # expected. This action does not fetch tags unless we supply a | |
| # fetch depth of zero. | |
| fetch-depth: 0 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| - name: Install regctl | |
| uses: regclient/actions/regctl-installer@7c7e6f032ce752dc58585af38e242635f4e7cd8e # main | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Load cached build tools | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: .build | |
| key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
| - name: Download archived images | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| name: images | |
| path: . | |
| - name: Load archived images | |
| run: | | |
| tar xvf images.tar.gz | |
| make load-images | |
| - name: Run k8s integration | |
| env: | |
| NUM_RUNNERS: ${{ matrix.num_runners }} | |
| THIS_RUNNER: ${{ matrix.runner_id }} | |
| KUBECTLVERSION: ${{ matrix.test[0] }} | |
| K8SIMAGE: ${{ matrix.test[1] }} | |
| KINDVERSION: ${{ matrix.test[2] }} | |
| TERM: dumb | |
| CICD_TARGET_BRANCH: ${{ github.event.pull_request.base.ref }} | |
| run: ./.github/workflows/scripts/split_k8s.sh | xargs ./test/integration/test-k8s.sh | |
| integration-windows: | |
| name: integration (windows) | |
| runs-on: windows-2022 | |
| needs: images-windows | |
| timeout-minutes: 45 | |
| env: | |
| GOPATH: 'D:\golang\go' | |
| GOCACHE: 'D:\golang\cache' | |
| GOMODCACHE: 'D:\golang\modcache' | |
| permissions: | |
| contents: read | |
| defaults: | |
| run: | |
| shell: msys2 {0} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| cache: true | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Load cached build tools | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: .build | |
| key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
| - name: Install msys2 | |
| uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d # v2.31.0 | |
| with: | |
| msystem: MINGW64 | |
| update: true | |
| path-type: inherit | |
| install: >- | |
| git base-devel mingw-w64-x86_64-toolchain unzip | |
| - name: Download archived images | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| name: images-windows | |
| path: . | |
| - name: Wait for Docker to be ready | |
| run: pwsh ./.github/workflows/scripts/wait-for-docker-windows.ps1 | |
| - name: Load archived images | |
| run: docker load -i images-windows.tar.gz | |
| - name: Run integration tests | |
| # Run all tests for now | |
| run: make integration-windows | |
| cache-deps-windows: | |
| name: cache-deps (windows) | |
| runs-on: windows-2022 | |
| timeout-minutes: 45 | |
| env: | |
| GOPATH: 'D:\golang\go' | |
| GOCACHE: 'D:\golang\cache' | |
| GOMODCACHE: 'D:\golang\modcache' | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| cache: true | |
| - name: Setup dep cache | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Pull go deps | |
| run: go mod download | |
| lint-windows: | |
| name: lint (windows) | |
| runs-on: windows-2022 | |
| needs: cache-deps-windows | |
| timeout-minutes: 45 | |
| env: | |
| GOPATH: 'D:\golang\go' | |
| GOCACHE: 'D:\golang\cache' | |
| GOMODCACHE: 'D:\golang\modcache' | |
| permissions: | |
| contents: read | |
| defaults: | |
| run: | |
| shell: msys2 {0} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| cache: true | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Setup build tool cache | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: .build | |
| key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
| - name: Install msys2 | |
| uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d # v2.31.0 | |
| with: | |
| msystem: MINGW64 | |
| update: true | |
| install: >- | |
| git base-devel mingw-w64-x86_64-toolchain unzip | |
| - name: Lint | |
| run: make lint-code | |
| - name: Tidy check | |
| run: make tidy-check | |
| - name: Generate check | |
| run: make generate-check | |
| unit-test-windows: | |
| name: unit-test (windows) | |
| runs-on: windows-2022 | |
| needs: cache-deps-windows | |
| timeout-minutes: 45 | |
| env: | |
| GOPATH: 'D:\golang\go' | |
| GOCACHE: 'D:\golang\cache' | |
| GOMODCACHE: 'D:\golang\modcache' | |
| permissions: | |
| contents: read | |
| defaults: | |
| run: | |
| shell: msys2 {0} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| cache: true | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Install msys2 | |
| uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d # v2.31.0 | |
| with: | |
| msystem: MINGW64 | |
| update: true | |
| install: >- | |
| git base-devel mingw-w64-x86_64-toolchain unzip | |
| - name: Run unit tests | |
| run: ./.github/workflows/scripts/run_unit_tests.sh | |
| artifacts-windows: | |
| name: artifacts (windows) | |
| runs-on: windows-2022 | |
| needs: cache-deps-windows | |
| timeout-minutes: 45 | |
| env: | |
| GOPATH: 'D:\golang\go' | |
| GOCACHE: 'D:\golang\cache' | |
| GOMODCACHE: 'D:\golang\modcache' | |
| permissions: | |
| contents: read | |
| defaults: | |
| run: | |
| shell: msys2 {0} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - name: Setup go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: 'go.mod' | |
| cache: true | |
| - name: Load cached deps | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Load cached build tools | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: .build | |
| key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
| - name: Install msys2 | |
| uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d # v2.31.0 | |
| with: | |
| msystem: MINGW64 | |
| update: true | |
| install: >- | |
| git base-devel mingw-w64-x86_64-toolchain zip unzip | |
| - name: Build binaries | |
| run: make build | |
| - name: Setup executables cache | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ./bin/ | |
| key: ${{ runner.os }}-executables-${{ github.sha }} | |
| - name: Build artifacts | |
| run: ./.github/workflows/scripts/build_artifacts.sh ${{ runner.os }} | |
| - name: Archive artifacts | |
| uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4 | |
| with: | |
| name: binaries-windows | |
| path: ./artifacts/ | |
| milestone-check: | |
| name: milestone-check | |
| runs-on: ubuntu-22.04 | |
| if: github.event_name == 'merge_group' | |
| timeout-minutes: 5 | |
| permissions: | |
| contents: read | |
| pull-requests: read | |
| steps: | |
| - name: Get PR number from merge group | |
| id: get-pr | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| run: | | |
| # Extract PR number from merge group head ref (format: refs/heads/gh-readonly-queue/main/pr-<number>-<sha>) | |
| PR_NUMBER=$(echo "${{ github.event.merge_group.head_ref }}" | grep -oP 'pr-\K[0-9]+') | |
| if [ -z "$PR_NUMBER" ]; then | |
| echo "Error: Could not extract PR number from head_ref: ${{ github.event.merge_group.head_ref }}" | |
| exit 1 | |
| fi | |
| echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT | |
| echo "Found PR number: $PR_NUMBER" | |
| - name: Check milestone | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| run: | | |
| PR_NUMBER="${{ steps.get-pr.outputs.pr_number }}" | |
| MILESTONE=$(gh pr view "$PR_NUMBER" --repo ${{ github.repository }} --json milestone --jq '.milestone.title // empty') | |
| if [ -z "$MILESTONE" ]; then | |
| echo "Error: PR #$PR_NUMBER does not have a milestone assigned." | |
| echo "Please assign a milestone before merging." | |
| exit 1 | |
| fi | |
| echo "PR #$PR_NUMBER has milestone: $MILESTONE" | |
| success: | |
| runs-on: ubuntu-22.04 | |
| needs: [lint, unit-test, unit-test-race-detector, artifacts, integration, integration-k8s, lint-windows, unit-test-windows, artifacts-windows, integration-windows, milestone-check] | |
| if: always() | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Check for failures | |
| if: | | |
| contains(needs.*.result, 'failure') || | |
| contains(needs.*.result, 'cancelled') || | |
| (contains(needs.*.result, 'skipped') && needs.milestone-check.result != 'skipped') | |
| run: | | |
| echo "One or more required jobs failed, were cancelled, or were skipped" | |
| exit 1 | |
| - name: Declare victory! | |
| run: echo "# Successful - all required jobs passed" >> $GITHUB_STEP_SUMMARY |